Checks Performed
- ACM Certificate Should Not Be In Expired State
- ACM Certificates Should Have Minimum RSA Length
- Active Tracing Should Be Enabled For API Gateway Stages
- API Cache Should Be Enabled
- API Gateway APIs Should Use SSL Certificates
- API Gateway Execution Logging Should Be Enabled
- API Gateway Should Be Integrated With WAF
- API Gateway V2 Should Have Authorization Type Configuration
- API Gateway X-Ray Should Be Enabled
- AWS ACM Certificates Not Valid
- AWS ACM Certificates Renewal Under 30 Days
- AWS ACM Certificates Renewal Under 45 Days
- AWS ACM Certificates Renewal Under 7 Days
- AWS ACM Certificates With Wildcard Domain Names
- AWS KMS Customer Master Keys Should Be Used For EFS Encryption
- Cloudwatch Logs Must Be Enabled For All APIs
- Cloudwatch Metrics Must Be Enabled For All APIs
- Content Encoding Should Be Enabled For APIs
- Default Execution Endpoint Should Not Be Enabled
- EFS Encryption Should Be Enabled
- Enable Encryption For API Cache
- Expiring SSL Client Certificates Should Be Rotated
- Only Private Endpoints Should Access APIs